Skip to content
Noroxi

thruk records

6 published records for vendor thruk.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2023-34096
    54Plan

    Thruk has Path Traversal Vulnerability in panorama.pm

    HighCVSS 8.8Proof of conceptEPSS 62%

    thruk · thrukJun 8, 2023

  • CVE-2024-23822
    39Monitor

    Thruk Incorrect limitation of a pathname to a restricted directory (Path Traversal) (CWE-22)

    CriticalCVSS 9.8No exploitEPSS 1%

    thruk · thrukJan 29, 2024

  • CVE-2024-39915
    39Monitor

    Authenticated remote code execution in Thruk

    CriticalCVSS 9.9No exploitEPSS 0%

    sni · thrukJul 15, 2024

  • CVE-2021-35488
    25Monitor

    Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter.

    MediumCVSS 6.1Proof of conceptEPSS 2%

    thruk · thrukNov 9, 2021

  • CVE-2021-35489
    24Monitor

    Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or

    MediumCVSS 6.1No exploitEPSS 0%

    thruk · thrukNov 9, 2021

  • CVE-2021-35490
    21Monitor

    Thruk before 2.44 allows XSS for a quick command.

    MediumCVSS 5.4No exploitEPSS 0%

    thruk · thrukDec 15, 2021